---
redirect_from:
  - /workspace/sso/
---

# Single Sign-on

As an account administrator, you can manage how your team accesses Cube Cloud.
There are options to log in using email and password, a GitHub account, or a
Google account.

Cube Cloud also provides single sign-on (SSO) via identity providers supporting
industry-proven [SAML 2.0 protocol][wiki-saml], e.g., Okta, Google Workspace,
Azure AD, etc.

<SuccessBox>

Single sign-on is available in Cube Cloud on
[Enterprise](https://cube.dev/pricing) tier.
[Contact us](https://cube.dev/contact) for details.

</SuccessBox>

<Diagram
  src="https://ucarecdn.com/e3b3bce2-117e-4cbc-b516-c71b51b98888/"
  style="border: 0;"
/>

## Guides

Single sign-on works with various identity providers. Check the following guides
to get tool-specific instructions:

<Grid imageSize={[56, 56]}>
  <GridItem
    url="sso/google-workspace"
    imageUrl="https://static.cube.dev/icons/google-cloud.svg"
    title="Google Workspace"
  />
  <GridItem
    url="sso/microsoft-entra-id"
    imageUrl="https://static.cube.dev/icons/azure.svg"
    title="Microsoft Entra ID"
  />
  <GridItem
    url="sso/okta"
    imageUrl="https://static.cube.dev/icons/okta.svg"
    title="Okta"
  />
</Grid>

## Configuration

To manage sign-in and single sign-on settings, click your user name from the
top-right corner, navigate to <Btn>Team & Security</Btn>, and switch to
the <Btn>Authentication & SSO</Btn> tab:

<Screenshot
  alt="Cube Cloud Team Authentication and SSO tab"
  src="https://ucarecdn.com/72248967-9b77-4a7e-970c-162b96861e4a/"
/>

[wiki-saml]: https://en.wikipedia.org/wiki/SAML_2.0
